Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030373a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a393030373a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          t6casAxXyUeeZz6c1b9EcBbV+GdiJy/zeCklkp5ktj0=
Subject key identifier:   F3:97:77:6D:69:78:1C:70:AD:41:A9:C6:41:95:11:21:0D:66:59:67
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       2B2C44281148CE9F09BAA735BAFBFE33B5CA31D5
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030373a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:55 +0000
ROA not before:           Thu 08 Feb 2024 14:00:55 +0000
ROA not after:            Thu 06 Feb 2025 14:05:55 +0000
asID:                     271014
IP address blocks:        2804:74f4:9007::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2c:44:28:11:48:ce:9f:09:ba:a7:35:ba:fb:fe:33:b5:ca:31:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:55 2024 GMT
            Not After : Feb  6 14:05:55 2025 GMT
        Subject: CN=F397776D69781C70AD41A9C6419511210D665967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:66:77:a8:46:74:3a:42:32:72:6f:15:46:
                    1b:c7:03:81:51:9c:96:94:61:18:23:31:cd:bb:c4:
                    21:7b:00:6b:8a:40:9e:25:09:fa:5f:e7:ef:77:4b:
                    8c:80:c8:32:74:ed:6c:92:75:95:68:ef:ee:93:89:
                    60:7e:a0:19:73:ac:69:20:68:22:96:8f:b4:49:81:
                    47:11:4f:f6:02:d1:2a:d1:14:f3:9a:69:2b:aa:c5:
                    30:e1:aa:69:1b:b4:c7:e9:f5:6c:3c:3e:55:31:48:
                    30:1c:1f:d8:20:12:5e:26:a1:9e:f1:b5:33:33:33:
                    64:db:04:0e:c4:b6:5d:25:e4:8b:f6:74:46:be:a1:
                    88:4f:03:dc:c8:ed:fa:3e:eb:d3:0a:22:c9:b1:e2:
                    ce:9a:ab:0a:e9:1f:b3:a2:15:d3:43:41:98:06:a9:
                    bb:5b:1c:7a:c8:01:a3:36:e4:1d:64:12:68:b7:d7:
                    73:e0:6a:8f:2d:f2:0f:83:65:da:ec:71:49:a5:e5:
                    a9:99:b4:72:66:7c:31:91:e9:d2:9e:ab:94:d8:85:
                    20:31:83:62:68:34:75:05:93:80:11:1d:bb:e8:f0:
                    c5:e5:15:cf:8b:2e:e8:ae:eb:56:fa:30:fc:16:69:
                    f7:ee:43:dd:8b:7a:fe:65:70:88:e5:50:fd:66:2c:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:77:6D:69:78:1C:70:AD:41:A9:C6:41:95:11:21:0D:66:59:67
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030373a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:9007::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:a9:5f:57:5f:28:c1:0e:3f:2f:3b:0a:00:ab:f5:02:4f:37:
         88:e2:dd:d0:bd:96:03:c2:13:3e:b7:d6:5f:c4:83:e6:4a:00:
         3d:c4:9c:f4:bc:30:1e:8b:3c:f7:07:78:81:f6:25:e8:a4:c6:
         62:7d:20:4e:74:70:ff:b2:20:94:fa:6e:5e:b2:87:20:04:79:
         a3:75:9e:ec:13:b4:fb:d3:2a:39:6b:fd:b4:48:e8:7c:39:f1:
         70:d7:5d:5f:d9:75:8f:c2:32:9c:95:76:55:f4:6f:7b:42:22:
         cd:f6:9a:90:6d:e4:e4:69:b0:bf:b8:c1:2f:14:a0:73:d6:fc:
         12:44:79:3b:7a:fe:9c:2a:47:3d:64:01:ed:6d:1c:4c:fc:39:
         36:b3:6f:09:39:a0:c0:69:85:4c:34:05:f3:df:ac:bd:20:3d:
         51:cc:ff:36:89:25:88:c4:37:4b:13:3d:5d:6a:2b:58:bd:58:
         4b:74:ed:b7:f4:69:bf:62:73:17:35:f2:6f:b9:cb:5d:06:e8:
         42:35:31:94:54:99:53:99:49:0f:0f:c1:48:02:40:74:c4:07:
         17:ab:51:ec:95:87:55:68:25:df:9d:33:73:ff:77:28:a0:89:
         7f:12:bc:24:e5:46:d2:fa:15:8c:d7:53:2a:ba:68:7f:26:99:
         85:80:f8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:27:29 2025 by rpki-client